README.md

Shellcode Loader

Abusing callback to run shellcode.

Overview

Eksekusi shellcode dengan EnumerateLoadedModulesEx.

BOOL EnumerateLoadedModulesEx (HANDLE hProcess, PENUMLOADED_MODULES_CALLBACK64 EnumLoadedModulesCallback, PVOIDUserContext);

BOOL EnumerateLoadedModulesExW (HANDLEhProcess, PENUMLOADED_MODULES_CALLBACKW64 EnumLoadedModulesCallback, PVOID UserContext);

BOOL EnumerateLoadedModules64 (HANDLE hProcess, PENUMLOADED_MODULES_CALLBACK64 EnumLoadedModulesCallback, PVOIDUserContext);

BOOL EnumerateLoadedModulesW64 (HANDLEhProcess, PENUMLOADED_MODULES_CALLBACKW64 EnumLoadedModulesCallback, PVOID UserContext);

Reference

• MSDN EnumerateLoadedModulesEx
• MSDN EnumerateLoadedModulesExW
• MSDN EnumerateLoadedModules64
• MSDN EnumerateLoadedModulesW64